Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/547741A8B06711EFBE408C69C4F9AE02.roa
File:                     547741A8B06711EFBE408C69C4F9AE02.roa (raw, json)
Hash identifier:          SYRwRQFfw4U3s45TeSp6z5ze2WAXMe1jShmT0lgpRlo=
Subject key identifier:   8C:B8:14:AA:6C:04:80:86:A3:50:7B:7C:25:4B:25:C2:84:C4:9E:A9
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F95
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/547741A8B06711EFBE408C69C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:27:15 +0000
ROA not before:           Sun 31 May 2026 16:27:15 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153253
IP address blocks:        160.250.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12181 (0x2f95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:27:15 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6162-8394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:7b:26:0e:25:ab:13:02:f3:3a:4c:06:18:
                    eb:d9:5c:40:d5:ab:f7:f4:aa:22:48:7d:98:31:37:
                    34:5e:3d:6c:69:cd:0b:bd:4c:d3:fd:9d:e3:70:1b:
                    c6:1e:fe:c0:61:f4:f4:6f:fe:bb:60:86:ea:97:f3:
                    10:97:64:a3:f9:be:26:f1:25:c8:2c:92:16:d5:03:
                    6c:cb:52:71:8d:5b:38:64:c8:01:6b:38:ff:f8:c4:
                    d2:fa:58:66:69:7c:08:de:e0:2e:e5:67:24:91:3b:
                    77:b5:7a:f8:c7:e6:dd:1f:bf:c4:89:20:2b:d4:69:
                    66:ef:0e:02:9f:f9:e0:0e:01:4e:2d:c2:f3:be:25:
                    10:3f:71:4b:62:0c:2c:7f:65:dc:9b:ee:1a:31:30:
                    63:d0:00:17:97:e1:1c:d9:63:0b:5c:fb:32:30:51:
                    4d:65:ae:55:43:ee:35:20:d4:cf:f4:83:36:07:0d:
                    9f:98:7e:f1:92:c5:38:db:a0:f4:a6:b1:f9:9b:24:
                    e5:db:9b:d6:a5:2c:d4:e5:a7:fe:83:72:dc:2b:e4:
                    39:7d:7d:26:98:87:48:74:57:71:89:c8:1d:ee:50:
                    ca:5b:3e:27:e6:18:4d:4f:74:87:c5:4a:c1:f3:f7:
                    81:f9:be:d0:ca:56:da:ee:7b:fe:6a:b8:bb:d7:cb:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B8:14:AA:6C:04:80:86:A3:50:7B:7C:25:4B:25:C2:84:C4:9E:A9
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/547741A8B06711EFBE408C69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:9e:ee:f0:1b:9a:00:c1:48:b9:f7:60:75:0f:16:39:f7:2d:
         e7:25:3a:d0:2f:7d:87:f4:9a:fd:08:52:e5:27:07:de:67:1f:
         8c:05:cd:28:c3:57:20:37:fd:39:4d:73:06:93:23:49:53:8f:
         03:e7:a6:3a:59:08:39:e5:32:ca:fe:31:97:ce:2b:04:7b:b6:
         1e:05:45:1b:16:15:bf:75:87:ef:85:fc:bd:00:a1:29:a9:01:
         bf:e6:7c:88:0f:f5:81:28:66:b2:99:e4:3b:36:c3:23:a8:0c:
         91:69:6d:32:7f:3f:0a:20:af:19:32:9d:39:d9:8f:7e:ff:7b:
         6f:a7:a7:4e:3c:f8:f4:fb:08:e1:f6:a7:17:e0:d4:2f:fc:e2:
         87:29:76:5f:6e:95:fa:98:14:a6:ac:70:1e:ef:07:1e:a7:aa:
         53:2f:d6:b1:ad:59:b2:50:91:13:ea:b4:31:be:68:1f:45:a6:
         3d:37:80:d4:14:f0:d2:2e:fd:f8:f5:e6:f5:8f:69:27:e0:0c:
         1f:25:b6:b3:98:9e:3e:7b:01:98:d6:40:93:b2:99:2c:6c:e4:
         f5:59:cc:71:f6:7d:7d:08:6c:4a:00:cb:da:c9:f6:6c:1c:1b:
         37:e3:a5:a1:a1:f4:04:59:8a:37:49:31:2a:12:7f:8d:cf:d0:
         ec:05:31:99
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICL5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyNzE1WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjE2Mi04Mzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMZ7Jg4lqxMC8zpMBhjr2VxA1av39KoiSH2YMTc0Xj1sac0LvUzT/Z3jcBvG
Hv7AYfT0b/67YIbql/MQl2Sj+b4m8SXILJIW1QNsy1JxjVs4ZMgBazj/+MTS+lhm
aXwI3uAu5WckkTt3tXr4x+bdH7/EiSAr1Glm7w4Cn/ngDgFOLcLzviUQP3FLYgws
f2Xcm+4aMTBj0AAXl+Ec2WMLXPsyMFFNZa5VQ+41INTP9IM2Bw2fmH7xksU426D0
prH5myTl25vWpSzU5af+g3LcK+Q5fX0mmIdIdFdxicgd7lDKWz4n5hhNT3SHxUrB
8/eB+b7Qylba7nv+ari718tqQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIy4FKps
BICGo1B7fCVLJcKExJ6pMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTQ3NzQxQThC
MDY3MTFFRkJFNDA4QzY5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoPp2MA0GCSqGSIb3DQEBCwUAA4IBAQCfnu7wG5oAwUi592B1DxY5
9y3nJTrQL32H9Jr9CFLlJwfeZx+MBc0ow1cgN/05TXMGkyNJU48D56Y6WQg55TLK
/jGXzisEe7YeBUUbFhW/dYfvhfy9AKEpqQG/5nyID/WBKGaymeQ7NsMjqAyRaW0y
fz8KIK8ZMp052Y9+/3tvp6dOPPj0+wjh9qcX4NQv/OKHKXZfbpX6mBSmrHAe7wce
p6pTL9axrVmyUJET6rQxvmgfRaY9N4DUFPDSLv349eb1j2kn4AwfJbazmJ4+ewGY
1kCTspksbOT1Wcxx9n19CGxKAMvayfZsHBs346WhofQEWYo3STEqEn+Nz9DsBTGZ
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:43 2026 by rpki-client